Security Advisory

CVE-2026-57291

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-24 13:20:10
Last updated 2026-06-24 15:57:40
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.